PT-2018-3746 · Red Hat +3 · Gluster +3

Name of the Vulnerable Software and Affected Versions: gluster versions 3.x Description: The issue is related to a privilege escalation flaw in the gluster snapshot scheduler, which can be exploited by scheduling a malicious cronjob via symlink. This flaw allows an attacker to escalate privileges...

vBulletin 'url' parameter open redirect vulnerability

vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . An open redirector vulnerability exists in vBulletin versions 3.x.x and 4.2.x through 4.2.5. An attacker can exploit this vulnerability by sending the 'url'...

Rubrik CDM Certificate Validation Vulnerability

Rubrik CDM is a cloud data management system from Rubrik USA. The system integrates backup, instant recovery, replication, search, analytics, archiving and replication data management into one secure architecture in the data center and in the cloud. A certificate validation vulnerability exists i...

CVE-2015-5036

Cross-site scripting XSS vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5035...

CVE-2015-5035

Cross-site scripting XSS vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-5036...

Nagios "process_cgivars()" 单字节溢出漏洞

Nagios是一款免费开放源代码的主机和服务监视软件，可使用在多种Linux和Unix操作系统下。 Nagios 3.x及4.x版本的函数 "processcgivars" 在实现上存在单字节溢出漏洞，攻击者利用特制的键值，成功利用后可造成越界读取内存。 0 Nagios Nagios 4.x Nagios Nagios 3.x 厂商补丁： Nagios ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

PT-2004-2751 · Solarwinds · Dameware Mini Remote Control

Name of the Vulnerable Software and Affected Versions: DameWare Mini Remote Control versions 3.x through 3.73 DameWare Mini Remote Control versions 4.x through 4.1 Description: The issue allows remote attackers to gain sensitive information because the Blowfish encryption key is transmitted in...